RSAC 2025: AI, Privacy Compliance, and Emerging Cyber Threats

RSAC 2025 Key Trends

• 💡 Artificial intelligence is a central theme, driving automation, real-time analysis, and security operations.
• 🎯 Identity security is a major focus, with solutions addressing vulnerabilities tied to human and non-human identities.
• 🧩 Vendors are pushing for unified platforms to combat security tool fragmentation, consolidating visibility and response.
• 🚀 A shift towards proactive continuous security is evident, emphasizing protection of post-launch applications and external digital threats.

Cyber Fraud and Deepfake Threats

• ⚠️ The FS-ISAC has launched a Cyberfraud Prevention Framework to help financial institutions detect and stop scams earlier.
• 📈 Real-time deepfake fraud is a growing concern, with accessible software enabling convincing impersonations during live calls.
• 🎣 The FBI reported significant losses from crypto scams, and new phishing tactics are targeting Gmail users.

Privacy Compliance in the Age of AI

• ⚖️ Daniel B. Rosenzweig, a data privacy and AI attorney, emphasizes the principle of "say what you do, do what you say" for building trust and compliance.
• 🌐 Discussions covered U.S. state privacy laws, global data transfer regulations, and the role of privacy-enhancing technologies.
• 🤖 Future privacy and AI regulation will likely focus on the use of personal data for AI training and address high-risk AI systems.

Federal Cyber Workforce and Startup Innovation

• 📉 Chris Krebs criticized efforts to shrink the federal cyber workforce, warning of weakened national defenses.
• ⚠️ The absence of NSA and CISA leaders at RSAC highlights instability due to budget cuts and leadership vacancies.
• 🏆 Project Discovery won the RSAC 2025 Innovation Sandbox competition for its open-source vulnerability detection platform, Nuclei.
• 🚀 Kevin McGee, reporting from RSAC, highlighted the vibrant startup scene and the evolving role of cybersecurity as a growth driver.